Re: panic: pmap_zero_page: CMAP3 busy

2003-10-12 Thread Don Lewis
On 11 Oct, Steve Kargl wrote:
 Upgrade tonight (7pm PST) and received the following
 on rebooting
 
 panic: pmap_zero_page: CMAP3 busy
 
 Unfortunately, this system does not have a serial
 console and the panic locked it up tight.  Only
 a hard reset brought the system back.

I was just about to type make installworld when I got this message

I checked the commit logs and didn't see any recent commits that looked
suspicious, and since I do have a serial console I decided to throw
caution to the wind and give the new kernel a try.

Other than an annoyingly long pause while GEOM waits for my SCSI cdrom
drive to figure out that it is empty (which has been noted in another
thread), my system booted without any problems.  My kernel has
everything commited to the present time except:

tjr 2003/10/11 21:25:26 PDT

  FreeBSD src repository

  Modified files:
sys/i386/ibcs2   ibcs2_misc.c ibcs2_signal.c
 ibcs2_socksys.c ibcs2_util.c ibcs2_util.h
 imgact_coff.c
  Log:
  Fix a multitude of security bugs in the iBCS2 emulator:
  - Return NULL instead of returning memory outside of the stackgap
in stackgap_alloc() (FreeBSD-SA-00:42.linux)
  - Check for stackgap_alloc() returning NULL in ibcs2_emul_find();
other calls to stackgap_alloc() have not been changed since they
are small fixed-size allocations.
  - Replace use of strcpy() with strlcpy() in exec_coff_imgact()
to avoid buffer overflow
  - Use strlcat() instead of strcat() to avoid a one byte buffer
overflow in ibcs2_setipdomainname()
  - Use copyinstr() instead of copyin() in ibcs2_setipdomainname()
to ensure that the string is null-terminated
  - Avoid integer overflow in ibcs2_setgroups() and ibcs2_setgroups()
by checking that gidsetsize argument is non-negative and
no larger than NGROUPS_MAX.
  - Range-check signal numbers in ibcs2_wait(), ibcs2_sigaction(),
ibcs2_sigsys() and ibcs2_kill() to avoid accessing array past
the end (or before the start)

  Revision  ChangesPath
  1.52  +21 -3 src/sys/i386/ibcs2/ibcs2_misc.c
  1.32  +7 -2  src/sys/i386/ibcs2/ibcs2_signal.c
  1.19  +5 -3  src/sys/i386/ibcs2/ibcs2_socksys.c
  1.17  +4 -2  src/sys/i386/ibcs2/ibcs2_util.c
  1.17  +4 -1  src/sys/i386/ibcs2/ibcs2_util.h
  1.61  +1 -1  src/sys/i386/ibcs2/imgact_coff.c


Maybe this problem only affects certain hardware.  Here is my dmesg.boot
for comparison:

Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.1-CURRENT #28: Sat Oct 11 21:58:42 PDT 2003
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERICSMB
Preloaded elf kernel /boot/kernel/kernel at 0xc0a8f000.
Preloaded elf module /boot/kernel/aout.ko at 0xc0a8f244.
Preloaded elf module /boot/kernel/acpi.ko at 0xc0a8f2f0.
Timecounter i8254 frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) XP 1900+ (1608.23-MHz 686-class CPU)
  Origin = AuthenticAMD  Id = 0x662  Stepping = 2
  
Features=0x383fbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
  AMD Features=0xc048MP,AMIE,DSP,3DNow!
real memory  = 1073676288 (1023 MB)
avail memory = 1033592832 (985 MB)
Pentium Pro MTRR support enabled
npx0: [FAST]
npx0: math processor on motherboard
npx0: INT 16 interface
acpi0: GBTAWRDACPI on motherboard
pcibios: BIOS version 2.10
Using $PIR table, 11 entries at 0xc00fdc30
acpi0: Power Button (fixed)
Timecounter ACPI-fast frequency 3579545 Hz quality 1000
acpi_timer0: 24-bit timer at 3.579545MHz port 0x4008-0x400b on acpi0
acpi_cpu0: CPU on acpi0
acpi_button0: Power Button on acpi0
acpi_button1: Sleep Button on acpi0
pcib0: ACPI Host-PCI bridge port 
0x6000-0x607f,0x5000-0x500f,0x4080-0x40ff,0x4000-0x407f,0xcf8-0xcff on acpi0
pci0: ACPI PCI bus on pcib0
pcib0: slot 7 INTD is routed to irq 10
pcib0: slot 7 INTD is routed to irq 10
pcib0: slot 10 INTA is routed to irq 11
pcib0: slot 12 INTA is routed to irq 15
agp0: AMD 761 host to AGP bridge port 0xc000-0xc003 mem 
0xef02-0xef020fff,0xe800-0xebff at device 0.0 on pci0
pcib1: PCIBIOS PCI-PCI bridge at device 1.0 on pci0
pci1: PCI bus on pcib1
pci_cfgintr: 1:5 INTA BIOS irq 15
pci1: display, VGA at device 5.0 (no driver attached)
isab0: PCI-ISA bridge at device 7.0 on pci0
isa0: ISA bus on isab0
atapci0: VIA 82C686B UDMA100 controller port 0xc400-0xc40f at device 7.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata0: [MPSAFE]
ata1: at 0x170 irq 15 on atapci0
ata1: [MPSAFE]
uhci0: VIA 83C572 USB controller port 0xc800-0xc81f irq 10 at device 7.2 on pci0
usb0: VIA 83C572 USB controller on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhub0: port error, restarting port 1
uhub0: port error, giving up port 1
uhub0: port error, restarting port 2
uhub0: port 

Re: panic: pmap_zero_page: CMAP3 busy

2003-10-12 Thread Bryan Liesner
On Sat, 11 Oct 2003, Don Lewis wrote:

 On 11 Oct, Steve Kargl wrote:
  Upgrade tonight (7pm PST) and received the following
  on rebooting
 
  panic: pmap_zero_page: CMAP3 busy
 
  Unfortunately, this system does not have a serial
  console and the panic locked it up tight.  Only
  a hard reset brought the system back.

 I was just about to type make installworld when I got this message

 I checked the commit logs and didn't see any recent commits that looked
 suspicious, and since I do have a serial console I decided to throw
 caution to the wind and give the new kernel a try.


I had this very same panic which happened right after commits to
locore.s and machdep.c.  Reverting back to the previous versions (with
everything else up-to-date) let it boot without panicking.

-Bryan
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: panic: pmap_zero_page: CMAP3 busy

2003-10-12 Thread Joe Marcus Clarke
On Sun, 2003-10-12 at 02:02, Don Lewis wrote:
 On 11 Oct, Steve Kargl wrote:
  Upgrade tonight (7pm PST) and received the following
  on rebooting
  
  panic: pmap_zero_page: CMAP3 busy
  
  Unfortunately, this system does not have a serial
  console and the panic locked it up tight.  Only
  a hard reset brought the system back.
 
 I was just about to type make installworld when I got this message
 
 I checked the commit logs and didn't see any recent commits that looked
 suspicious, and since I do have a serial console I decided to throw
 caution to the wind and give the new kernel a try.

See my previous email dated Sat, 11 Oct 2003 01:39:20 -0400 on the
subject.  It looks like the problem may have to do with CPU type (PIII
in my case).  My P4 laptop has the same -CURRENT, and does not
experience the problem.  It may also be noteworthy that I have
CPU_ENABLE_SSE on my PIII as well.

Joe

 
 Other than an annoyingly long pause while GEOM waits for my SCSI cdrom
 drive to figure out that it is empty (which has been noted in another
 thread), my system booted without any problems.  My kernel has
 everything commited to the present time except:
 
 tjr 2003/10/11 21:25:26 PDT
 
   FreeBSD src repository
 
   Modified files:
 sys/i386/ibcs2   ibcs2_misc.c ibcs2_signal.c
  ibcs2_socksys.c ibcs2_util.c ibcs2_util.h
  imgact_coff.c
   Log:
   Fix a multitude of security bugs in the iBCS2 emulator:
   - Return NULL instead of returning memory outside of the stackgap
 in stackgap_alloc() (FreeBSD-SA-00:42.linux)
   - Check for stackgap_alloc() returning NULL in ibcs2_emul_find();
 other calls to stackgap_alloc() have not been changed since they
 are small fixed-size allocations.
   - Replace use of strcpy() with strlcpy() in exec_coff_imgact()
 to avoid buffer overflow
   - Use strlcat() instead of strcat() to avoid a one byte buffer
 overflow in ibcs2_setipdomainname()
   - Use copyinstr() instead of copyin() in ibcs2_setipdomainname()
 to ensure that the string is null-terminated
   - Avoid integer overflow in ibcs2_setgroups() and ibcs2_setgroups()
 by checking that gidsetsize argument is non-negative and
 no larger than NGROUPS_MAX.
   - Range-check signal numbers in ibcs2_wait(), ibcs2_sigaction(),
 ibcs2_sigsys() and ibcs2_kill() to avoid accessing array past
 the end (or before the start)
 
   Revision  ChangesPath
   1.52  +21 -3 src/sys/i386/ibcs2/ibcs2_misc.c
   1.32  +7 -2  src/sys/i386/ibcs2/ibcs2_signal.c
   1.19  +5 -3  src/sys/i386/ibcs2/ibcs2_socksys.c
   1.17  +4 -2  src/sys/i386/ibcs2/ibcs2_util.c
   1.17  +4 -1  src/sys/i386/ibcs2/ibcs2_util.h
   1.61  +1 -1  src/sys/i386/ibcs2/imgact_coff.c
 
 
 Maybe this problem only affects certain hardware.  Here is my dmesg.boot
 for comparison:
 
 Copyright (c) 1992-2003 The FreeBSD Project.
 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
   The Regents of the University of California. All rights reserved.
 FreeBSD 5.1-CURRENT #28: Sat Oct 11 21:58:42 PDT 2003
 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERICSMB
 Preloaded elf kernel /boot/kernel/kernel at 0xc0a8f000.
 Preloaded elf module /boot/kernel/aout.ko at 0xc0a8f244.
 Preloaded elf module /boot/kernel/acpi.ko at 0xc0a8f2f0.
 Timecounter i8254 frequency 1193182 Hz quality 0
 CPU: AMD Athlon(tm) XP 1900+ (1608.23-MHz 686-class CPU)
   Origin = AuthenticAMD  Id = 0x662  Stepping = 2
   
 Features=0x383fbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
   AMD Features=0xc048MP,AMIE,DSP,3DNow!
 real memory  = 1073676288 (1023 MB)
 avail memory = 1033592832 (985 MB)
 Pentium Pro MTRR support enabled
 npx0: [FAST]
 npx0: math processor on motherboard
 npx0: INT 16 interface
 acpi0: GBTAWRDACPI on motherboard
 pcibios: BIOS version 2.10
 Using $PIR table, 11 entries at 0xc00fdc30
 acpi0: Power Button (fixed)
 Timecounter ACPI-fast frequency 3579545 Hz quality 1000
 acpi_timer0: 24-bit timer at 3.579545MHz port 0x4008-0x400b on acpi0
 acpi_cpu0: CPU on acpi0
 acpi_button0: Power Button on acpi0
 acpi_button1: Sleep Button on acpi0
 pcib0: ACPI Host-PCI bridge port 
 0x6000-0x607f,0x5000-0x500f,0x4080-0x40ff,0x4000-0x407f,0xcf8-0xcff on acpi0
 pci0: ACPI PCI bus on pcib0
 pcib0: slot 7 INTD is routed to irq 10
 pcib0: slot 7 INTD is routed to irq 10
 pcib0: slot 10 INTA is routed to irq 11
 pcib0: slot 12 INTA is routed to irq 15
 agp0: AMD 761 host to AGP bridge port 0xc000-0xc003 mem 
 0xef02-0xef020fff,0xe800-0xebff at device 0.0 on pci0
 pcib1: PCIBIOS PCI-PCI bridge at device 1.0 on pci0
 pci1: PCI bus on pcib1
 pci_cfgintr: 1:5 INTA BIOS irq 15
 pci1: display, VGA at device 5.0 (no driver attached)
 isab0: PCI-ISA bridge at device 7.0 on pci0
 isa0: ISA bus on isab0
 atapci0: VIA 82C686B UDMA100 controller port 0xc400-0xc40f at device 7.1 on pci0
 ata0: at 

Re: panic: pmap_zero_page: CMAP3 busy

2003-10-12 Thread Kris Kennaway
On Sun, Oct 12, 2003 at 02:35:21AM -0400, Joe Marcus Clarke wrote:
 On Sun, 2003-10-12 at 02:02, Don Lewis wrote:
  On 11 Oct, Steve Kargl wrote:
   Upgrade tonight (7pm PST) and received the following
   on rebooting
   
   panic: pmap_zero_page: CMAP3 busy
   
   Unfortunately, this system does not have a serial
   console and the panic locked it up tight.  Only
   a hard reset brought the system back.
  
  I was just about to type make installworld when I got this message
  
  I checked the commit logs and didn't see any recent commits that looked
  suspicious, and since I do have a serial console I decided to throw
  caution to the wind and give the new kernel a try.
 
 See my previous email dated Sat, 11 Oct 2003 01:39:20 -0400 on the
 subject.  It looks like the problem may have to do with CPU type (PIII
 in my case).  My P4 laptop has the same -CURRENT, and does not
 experience the problem.  It may also be noteworthy that I have
 CPU_ENABLE_SSE on my PIII as well.

Ditto with PIII and CPU_ENABLE_SSE.  I was able to get a traceback,
but I didn't bother to write it down.  I can do so if necessary.

CPU: Pentium III/Pentium III Xeon/Celeron (497.44-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0x673  Stepping = 3
  
Features=0x383f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE

Kris

pgp0.pgp
Description: PGP signature


Re: panic: pmap_zero_page: CMAP3 busy

2003-10-12 Thread Joe Marcus Clarke
On Sun, 2003-10-12 at 02:41, Kris Kennaway wrote:
 On Sun, Oct 12, 2003 at 02:35:21AM -0400, Joe Marcus Clarke wrote:
  On Sun, 2003-10-12 at 02:02, Don Lewis wrote:
   On 11 Oct, Steve Kargl wrote:
Upgrade tonight (7pm PST) and received the following
on rebooting

panic: pmap_zero_page: CMAP3 busy

Unfortunately, this system does not have a serial
console and the panic locked it up tight.  Only
a hard reset brought the system back.
   
   I was just about to type make installworld when I got this message
   
   I checked the commit logs and didn't see any recent commits that looked
   suspicious, and since I do have a serial console I decided to throw
   caution to the wind and give the new kernel a try.
  
  See my previous email dated Sat, 11 Oct 2003 01:39:20 -0400 on the
  subject.  It looks like the problem may have to do with CPU type (PIII
  in my case).  My P4 laptop has the same -CURRENT, and does not
  experience the problem.  It may also be noteworthy that I have
  CPU_ENABLE_SSE on my PIII as well.
 
 Ditto with PIII and CPU_ENABLE_SSE.  I was able to get a traceback,
 but I didn't bother to write it down.  I can do so if necessary.

The above mentioned email (subject PANIC with tonight's -CURRENT) has
the DDB trace (though it might not be very useful), and my machine is:

CPU: Intel Pentium III (748.28-MHz 686-class CPU)
   Origin = GenuineIntel Id = 0x683 Stepping = 3
  
Features=0x387f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,PN,MXX,FXSR,SSE

640 MB RAM

FreeBSD 5.1-CURRENT #11: Sat Oct 11 01:26:41 EDT 2003

Joe

 
 CPU: Pentium III/Pentium III Xeon/Celeron (497.44-MHz 686-class CPU)
   Origin = GenuineIntel  Id = 0x673  Stepping = 3
   
 Features=0x383f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
 
 Kris
-- 
PGP Key : http://www.marcuscom.com/pgp.asc


signature.asc
Description: This is a digitally signed message part


Re: panic: pmap_zero_page: CMAP3 busy

2003-10-12 Thread Dag-Erling Smørgrav
Joe Marcus Clarke [EMAIL PROTECTED] writes:
 See my previous email dated Sat, 11 Oct 2003 01:39:20 -0400 on the
 subject.  It looks like the problem may have to do with CPU type (PIII
 in my case).  My P4 laptop has the same -CURRENT, and does not
 experience the problem.  It may also be noteworthy that I have
 CPU_ENABLE_SSE on my PIII as well.

My new P4 consistently panics at boot (immediately before, or while,
starting init) with pmap_zero_page: CMAP3 busy with both SMP and UP
kernels built from fresh sources.  It boots fine with a three days old
SMP kernel.

CPU: Intel(R) Pentium(R) 4 CPU 2.40GHz (2411.67-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0xf29  Stepping = 9
  
Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE
  Hyperthreading: 2 logical CPUs

DES
-- 
Dag-Erling Smørgrav - [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to [EMAIL PROTECTED]